Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE

CVE-2026-23918 (CVSS score: 8.8), has been described as a case of “double free and possible RCE” in the HTTP/2 protocol handling. This issue has been addressed in version 2.4.67.